freeipa.git/ipaplatform/base, branch custodia

topology: manage ca replication agreements

2015-10-15T12:24:33+00:00

Configure IPA so that topology plugin will manage also CA replication
agreements.

upgrades if CA is congigured:
- ipaca suffix is added to cn=topology,cn=ipa,cn=etc,$SUFFIX
- ipaReplTopoManagedSuffix: o=ipaca is added to master entry
- binddngroup is added to o=ipaca replica entry

Signed-off-by: Simo Sorce 
Reviewed-By: Jan Cholasta

Implement replica promotion functionality

2015-10-15T12:24:33+00:00

This patch implements a new flag --promote for the ipa-replica-install command
that allows an administrative user to 'promote' an already joined client to
become a full ipa server.

The only credentials used are that of an administrator. This code relies on
ipa-custodia being available on the peer master as well as a number of other
patches to allow a computer account to request certificates for its services.

Therefore this feature is marked to work only with domain level 1 and above
servers.

Ticket: https://fedorahosted.org/freeipa/ticket/2888

Signed-off-by: Simo Sorce 
Reviewed-By: Jan Cholasta

Add ipa-custodia service

2015-10-15T12:24:33+00:00

Add a customized Custodia daemon and enable it after installation.
Generates server keys and loads them in LDAP autonomously on install
or update.
Provides client code classes too.

Signed-off-by: Simo Sorce 
Reviewed-By: Jan Cholasta

paths: Add GENERATE_RNDC_KEY.

2015-10-05T15:45:51+00:00

Reviewed-By: Martin Basti

ipatests: configure Network Manager not to manage resolv.conf

2015-10-02T12:01:50+00:00

For the duration of the test, makes resolv.conf unmanaged.
If NetworkManager is not running, nothing is changed.

https://fedorahosted.org/freeipa/ticket/5331

Reviewed-By: Martin Basti

install: fix kdcproxy user home directory

2015-09-23T14:29:49+00:00

https://fedorahosted.org/freeipa/ticket/5314

Reviewed-By: Martin Babinsky

platform: add option to create home directory when adding user

2015-09-23T14:29:49+00:00

https://fedorahosted.org/freeipa/ticket/5314

Reviewed-By: Martin Babinsky

ipa-backup: Add mechanism to store empty directory structure

2015-09-22T11:17:25+00:00

Certain subcomponents of IPA, such as Dogtag, cannot function if
non-critical directories (such as log directories) have not been
stored in the backup.

This patch implements storage of selected empty directories,
while preserving attributes and SELinux context.

https://fedorahosted.org/freeipa/ticket/5297

Reviewed-By: Martin Basti

install: support KRA update

2015-09-17T12:55:54+00:00

https://fedorahosted.org/freeipa/ticket/5250

Reviewed-By: Petr Vobornik

Using LDAPI to setup CA and KRA agents.

2015-09-07T16:01:13+00:00

The CA and KRA installation code has been modified to use LDAPI
to create the CA and KRA agents directly in the CA and KRA
database. This way it's no longer necessary to use the Directory
Manager password or CA and KRA admin certificate.

https://fedorahosted.org/freeipa/ticket/5257

Reviewed-By: Martin Basti